CVE-2019-1573

LOW2.5

Information Disclosure in GlobalProtect Agent

Published Apr 9, 2019

Modified 1 years ago

Details

GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.

References

WEB

http://www.securityfocus.com/bid/107868

WEB

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0005

WEB

https://security.paloaltonetworks.com/CVE-2019-1573

WEB

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-783

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2019-1573

ADVISORY